1 1. A method for creating an order-invariant fuzzy commitment, comprising: 

2 (a) receiving a first input element comprising a sequence of at least one value (ai,.. 

3 an) from a predetermined set; 

4 (b) generating a codeword of an error-correcting code for generating the commitment; 

5 (c) constructing a first sequence of coordinate sets (x;,yi), for i in {l,...n}, each of the 

6 coordinate sets having a first value (xi) corresponding to a representation of an associated 

7 one (ai) of the at least one value of the first input element and a second value (yO 

8 corresponding to a symbol in the codeword, wherein the symbol corresponds to the x ; th 

9 symbol in the codeword, wherein an order-invariant fuzzy commitment is formed. 

1 2. The method according to claim 1, wherein the representation of the first value in the 

2 first sequence of coordinate set is an integer representation. 

1 3. The method according to claim 1, further including outputting the first sequence. 

1 4. The method according to claim 1, further including deriving the first input element 

2 from a measurement of a biometric associated with a user. 

1 5. The method according to claim 4, further including selecting the biometric from the 

2 group consisting of fingerprint information, retinal scan information, iris scan information, 

3 bloodflow-pattern information, thermal imaging information, handwritten-signature 

4 dynamics information, physiognomic information, hand geometry information, and voice 

5 information. 

1 6. The method according to claim 1, further including adding chaff to the first sequence. 

1 7. The method according to claim 6, further including adding the chaff as sets of pairs of 

2 the form (x,y) such that x does not lie in the input sequence and y is generated at random. 
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1 8. The method according to claim 6, further including adding the chaff as sets of pairs of 

2 the form (x,y) such that one or more values x do lie in the input sequence and y is 

3 generated at random. 

1 9. The method according to claim 7, further including reordering the first sequence based 

2 upon the first value. 

1 10. The method according to claim 9, further including reordering the first sequence in 

2 ascending order based upon the first value. 

1 11. The method according to claim 1, further including applying a bijective function to an 

2 input secret to obtain the codeword for the symbol corresponding to the second value. 

1 12. The method according to claim 1, further including decommitting the order-invariant 

2 commitment by 

3 receiving a second input element including a second sequence of at least one value 

4 (bi, ..., b m ) from the predetermined set; 

5 receiving the first sequence; 

6 constructing a derived set of values (X’ = xf,..., x m ') representing respectively the 

7 at least one value (bi,..., b m ) in the second sequence; 

8 selecting a subset of the coordinate sets {(x;, y t )} in the first sequence (E) such that 

9 for each pair (x’,y’) in the subset, the first value in the pair (x’) lies in the derived set of 

10 values (X 3 ); and 

11 applying an error-correcting function to the subset. 

1 13. The method according to claim 12, wherein the error-correcting function includes a 

2 Reed-Solomon code. 

1 14. The method according to claim 1, further including selecting a polynomial to 

2 generate the codeword. 
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1 15. The method according to claim 1, further including utilizing a decodable design for 

2 decommiting the order-invariant commitment. 

1 16. The method according to claim 1, further including utilizing a decodable design 

2 comprising a design D tjU ,A and an algorithm M with running time polynomial in t such that 

3 for any Si e D t ,u,A where | S,-S' | < s, M(S') = Si, U is a universe, t is a cardinality of the 

4 design Dt,u,A, A is a value less than t, such that I Si n Sj | < A, and the design D^a includes 

5 a collection of sets {Si, S 2 ,..., S m }. 

1 17. A method for decommitting an order-invariant fuzzy commitment comprising: 

2 receiving a first input element including a sequence of one or more values from a 

3 predetermined set; 

4 receiving an order-invariant fuzzy commitment sequence; 

5 constructing a set of integers having a predetermined number of elements 

6 representing respectively values in the first input element; 

7 selecting a subset of the coordinate sets in the first sequence such that the first 

8 value in each subset coordinate set corresponds to the first value of at least one coordinate 

9 set in the first sequence; and 

10 applying an error-correcting function to the subset. 
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1 18. A method for creating a reordering-tolerant fuzzy commitment comprising: 

2 (a) receiving a first input element A including a first sequence of at least one value; 

3 (b) generating a first codeword c of an error-correcting code for the commitment; 

4 (c) constructing a sequence E of one or more data elements responsive to the first 

5 input element A and the error-correcting code c; 

6 (d) outputting the sequence E; 

7 (e) receiving a second input element B including a second sequence of at least one 

8 value and the sequence E, wherein the second sequence has a number of elements m; 

9 (f) applying a function d responsive to the second input element B and the sequence 

10 E, wherein the function yields as output a value of a second codeword (c' = d(B,E)), the 

11 function having a property such that d(V,E) =c for at least one possible value of V, where 

12 V comprises a third sequence having a number of elements m v , wherein the at least one 

13 value of the first sequence differs from the at least one value of the third sequence in at 

14 least m v /2 values; and 

15 (g) outputting the second codeword c'. 

1 19. A method for generating an order invariant fuzzy commitment of an item of 

2 information, comprising: 

3 receiving a first set of elements; and 

4 selecting a polynomial for encoding the item under the first set of elements to 

5 generate an order-invariant fuzzy commitment of the item. 

1 20. The method according to claim 19, further including inserting chaff points that form a 

2 part of the commitment of the item. 

1 21. The method according to claim 19, further including 

2 receiving a second set of elements; and 

3 selectively decommitting the item based upon a level of overlap of the first and 

4 second sets of elements. 
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1 22. The method according to claim 21, further including determining the polynomial 

2 from the second set of elements if the level of overlap is greater than a predetermined 

3 threshold. 

1 23. The method according to claim 21, further including utilizing an error-correcting 

2 code for determining the polynomial. 

1 24. The method according to claim 23, further including utilizing a Reed-Solomon error 

2 detecting code. 

1 25. The method according to claim 19, wherein the first set of elements corresponds to a 

2 biometric template. 

1 26. The method according to claim 19, further including utilizing a decodable design to 

2 decommit the item, wherein the decodable design includes constituent pairs of sets having 

3 a level of overlap less than a predetermined level. 

1 27. The method according to claim 19, further including hiding the first set of elements in 

2 a target set containing a plurality of elements selected from a field. 

1 28. The method according to claim 27, further including projecting the first set of 

2 elements onto the target set. 

1 29. A system for generating an order-invariant fuzzy commitment, comprising: 

2 a first input device for receiving first elements of information and providing a first 

3 set of elements; 

4 a commitment module for encrypting an item of information over the first set of 

5 elements using an order-invariant fuzzy commitment scheme; 
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6 a second input device for receiving second elements of information and providing a 

7 second set of elements; and 

8 a decommitment module for selectively decrypting the item of information based 

9 upon a level of overlap between the first set of elements and the second set of elements. 

1 30. The system according to claim 29, wherein the item of information is a key stored on 

2 a server. 

1 31. The system according to claim 30, wherein the commitment of the key is held by the 

2 user. 

1 32. The system according to claim 31, wherein the user utilizes the decommited key to 

2 authenticate the user to the server. 

1 33. The system according to claim 29, further including a chaff generator module for 

2 generating chaff as part of the item commitment. 

1 34. The system according to claim 29, wherein the first elements of information include 

2 biometric information. 

1 35. A biometric system, comprising: 

2 a scanner for receiving first biometric information from a user; 

3 a commitment module for generating an order-invariant fuzzy commitment of an 

4 item of information over the first biometric information; and 

5 a decommitment module for selectively decommitting the item of information from 

6 a level of overlap between the first biometric information and second biometric 

7 information. 
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1 36. The system according to claim 35, wherein the scanner includes a device for 

2 receiving biometric information from the group consisting of fingerprint information, 

3 retinal scan information, iris scan information, bloodflow-pattem information, thermal 

4 imaging information, handwritten-signature dynamics information, physiognomic 

5 information, hand geometry information, and voice information. 

1 37. The system according to claim 35, further including a chaff generator module for 

2 adding chaff to the commitment. 

1 38. A computer readable medium, comprising code for enabling the steps of: 

2 (a) receiving a first input element comprising a sequence of at least one value from a 

3 predetermined set; 

4 (b) generating a codeword of an error-correcting code; and 

5 (c) constructing a first sequence of coordinate sets, each of the coordinate sets having 

6 a first value corresponding to a representation of an associated one of the at least one 

7 value of the first input element and a second value corresponding to a symbol in the 

8 codeword, wherein the symbol is associated with the corresponding first value. 


31 








1 39. The computer readable medium according to claim 38, further including code for 

2 enabling the steps of 

3 receiving a second input element including a second sequence of at least one value 

4 from the predetermined set; 

5 receiving the order-invariant fuzzy commitment; 

6 constructing a set of values representing respectively the values in the second 

7 sequence; 

8 selecting a subset of the coordinate sets in the first sequence such that the first 

9 value in each subset coordinate set corresponds to the first value of at least one coordinate 

10 set in the first sequence; and 

11 applying an error-correcting function to the subset. 

1 40. A method for creating an order-invariant fuzzy commitment, comprising: 

2 (a) receiving a first input element (A) comprising a sequence of at least one value 

3 (ai,..., an) from a predetermined set (F); 

4 (b) generating a codeword (c) of an error-correcting code for generating the 

5 commitment; 

6 (c) constructing a first sequence (E) of coordinate sets (x i3 yi), for i in {l,...k} for 

7 integer k > 0, each of the coordinate sets having a first value (x ; ) corresponding to a 

8 representation of an associated one (a ; ) of the at least one value of the first input element 

9 (A) and a second value (yi) corresponding to a symbol in the codeword (c), wherein the 

10 symbol is selected in a manner responsive to the first value x,, wherein an order-invariant 

11 fuzzy commitment is formed. 


32 






1 41. A method for creating an order-invariant fuzzy commitment, comprising: 

2 (a) receiving a first input element (A) comprising a sequence of at least one value 

3 (ai,..., a n ) from a predetermined set (F); 

4 (b) generating a codeword (c) of an error-correcting code for generating the 

5 commitment; 

6 (c) constructing a first sequence (E) of coordinate sets (x;,Zi,yi), for i in {1,... ,k} for 

7 integer k > 0, each of the coordinate sets having a first value (xi) corresponding to a 

8 representation of an associated one (a;) of the at least one value of the first input element 

9 (A) and a second value (zi) constructed in a manner responsive to a pattern of occurrence 

10 of the associated one (aO of the at least one value of the first input element (A) in the 

11 sequence (ai,..., a n ) and a third value (y,) corresponding to a subset of symbols in the 

12 codeword (c), wherein the subset of symbols is selected in a manner responsive to at least 

13 one of the first and second values of the coordinate set (x ; and z ; ), wherein an order- 

14 invariant fuzzy commitment is formed. 

1 42. The method according to claim 41, further including decommitting the order- 

2 invariant commitment by 

3 receiving a second input element (B) including a second sequence of at least one 

4 value (bi, ..., b m ) from the predetermined set (F); 

5 receiving the first sequence (E); 

6 constructing a derived set of values (X’ = xi',..., x m ') representing respectively the 

7 at least one value (bi,..., b m ) in the second sequence (B); 

8 selecting a subset (E') of the coordinate sets {(x : , y;)} in the first sequence (E) 

9 such that for each pair (x’,z’,y’) in the subset (E’), the first value in the pair (x’) lies in the 

10 derived set of values (X’); and 

11 applying an error-correcting function to the subset (E’). 
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1 43. A method for creating an order-invariant fuzzy commitment, comprising: 

2 (a) receiving a first input element (A) comprising a sequence of at least one value 

3 (ai,..., a n ) from a predetermined set; 

4 (b) generating a codeword (c) of an error-correcting code for generating the 

5 commitment; 

6 (c) constructing a first sequence (E) of coordinate sets (xi,Zi,yO, for i in {1,.. .,k} for 

7 integer k > 0, each of the coordinate sets having a first value (xO corresponding to a 

8 representation of an associated one (a;) of the at least one value of the first input element 

9 (A) and a second value (z;) constructed in a manner responsive to information in the first 

10 input element (A), and a third value (y*) corresponding to a subset of symbols in the 

11 codeword (c), wherein the subset of symbols is selected in a manner responsive to at least 

12 one of the first and second values (xj and zfr of the coordinate set, wherein an order- 

13 invariant fuzzy commitment is formed. 

1 44. The method according to claim 43, further including decommitting the order- 

2 invariant commitment by 

3 receiving a second input element (B) including a second sequence of at least one 

4 value (bi,..., b m ) from the predetermined set (F); 

5 receiving the first sequence (E); 

6 constructing a derived set of values (X’ = xf, , x m ') representing respectively the 

7 at least one value (bi,..., b m ) in the second sequence (B); and 

8 selecting a subset (F) of the coordinate sets {(x„ y,)} in the first sequence (E) 

9 such that for each pair (x’,z’,y’) in the subset (E’), the first value in the pair (x’) lies in the 

10 derived set of values (X’); and 

11 applying an error-correcting function to the subset (E’). 
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1 45. A method for creating an order-invariant fuzzy commitment, comprising: 

2 (a) receiving a first input element (A) comprising a sequence of at least one pair of 

3 values (ai,wi), (a 2 ,w 2 )„..., (an,w n ) wherein each of the at least one ai values is from a first 

4 predetermined set (F) and each of the at least one w; values is from a second 

5 predetermined set (G); 

6 (b) generating a codeword (c) of an error-correcting code for generating the 

7 commitment; 

8 (c) constructing a first sequence (E) of coordinate sets (xi,Zi,yi), for i in {1,... ,k} for 

9 integer k > 0, each of the coordinate sets having a first value (xj) corresponding to a 

10 representation of an associated one ((a^w,)) of the at least one pair of values of the first 

11 input element (A) and a second value (zj) constructed in a manner responsive to an 

12 associated one ((a„Wi)) of the at least one value of the first input element (A) in the 

13 sequence (ai,wi), (a 2 ,w 2 )„..., (a n ,w n ) and a third value (y;) corresponding to a subset of 

14 symbols in the codeword (c), wherein the subset of symbols is selected in a manner 

15 responsive to at least one of the first and second values of the coordinate set (x; and Zi), 

16 wherein an order-invariant fuzzy commitment is formed. 
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